$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json) Hash identifier: ODongprc+apl82H/weHztxXTxaWP2/gEH/JDLdg/1R8= Subject key identifier: B7:0E:8C:57:EB:49:3B:1F:A5:4F:EB:BF:1D:38:54:8C:E6:D2:A9:E6 Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft Manifest number: 0490 Signing time: Sat 10 May 2025 23:35:35 +0000 Manifest this update: Sat 10 May 2025 23:35:34 +0000 Manifest next update: Sat 17 May 2025 23:35:34 +0000 Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: Qjj3SRuKOvmbwF3j70ElGaenk1WdGcEovJDzhsUQA6w=) 2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Validity Not Before: May 10 23:35:34 2025 GMT Not After : May 17 23:35:34 2025 GMT Subject: CN=681fe2c6-a89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:12:ae:f4:97:8c:0d:83:36:6b:fe:85:04: ab:87:62:63:fd:e9:40:2a:94:68:f4:51:0b:f8:64: 12:08:81:9d:3a:72:69:bb:74:ad:4e:e2:24:ea:82: 09:c5:7e:1a:ea:be:91:04:e8:5c:c0:8f:2f:16:81: db:68:2d:bb:c8:87:e3:56:ba:ac:ba:99:90:24:2a: 5f:57:58:43:24:c1:5b:6c:25:45:01:57:95:86:af: 1e:24:18:be:dd:5e:19:df:1b:c1:0d:d6:c6:73:33: 8c:24:ba:f5:81:90:37:bd:c1:4d:94:43:10:f6:7e: f3:16:42:ef:75:12:b4:3f:65:c5:9b:27:84:26:c9: 46:09:f0:3b:c2:af:27:69:dc:62:6a:ca:ec:3a:90: da:bb:af:58:a3:c6:03:c7:4a:23:69:11:e2:56:25: 18:7e:63:c7:28:32:2f:7e:e3:20:c8:6d:d7:86:b5: 29:53:cf:e2:0e:6b:47:8d:0e:5a:31:95:99:8f:85: 84:f4:66:64:d5:88:ce:76:aa:73:8d:c5:8f:03:5a: d5:6c:00:b8:eb:01:4a:d3:2b:11:a8:e3:cd:74:db: 23:30:bf:e6:8f:48:a8:76:34:54:1e:fc:b0:18:28: 54:1f:41:fc:74:0b:ae:8e:c6:05:b2:74:10:6f:09: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0E:8C:57:EB:49:3B:1F:A5:4F:EB:BF:1D:38:54:8C:E6:D2:A9:E6 X509v3 Authority Key Identifier: keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:32:de:97:8e:c4:f6:75:8c:1c:c1:c4:6e:0b:9c:14:07:41: 88:8e:6b:59:3c:d4:c5:28:95:0a:9b:12:3e:96:50:cb:d4:83: ed:7d:1b:9d:f8:ca:b8:37:a6:26:89:b5:aa:b0:56:16:b3:b8: 1b:06:dd:11:a7:ae:49:8d:cf:6f:2e:ff:55:40:2f:2b:5c:43: a6:9d:04:85:bf:ae:ca:df:77:03:88:de:e9:99:1d:ca:75:03: 70:b8:c5:0f:c4:ce:7b:e3:c1:d5:ff:95:c4:2f:bd:6a:52:01: 17:2e:65:9c:a0:76:54:6b:71:98:df:f5:ee:43:36:4a:11:d4: e8:a4:76:d3:1e:c4:23:6c:df:d2:0e:6f:09:42:28:94:de:1a: 01:c6:d8:ef:21:3a:12:51:24:0e:c7:2f:2a:0b:ef:8e:28:b7: 5b:5e:20:9f:79:ed:c2:27:55:a2:b1:57:c5:bf:67:30:32:cc: dd:b9:1e:1a:6f:f0:6f:4a:bd:d2:89:f1:0d:ed:14:a2:45:74: e7:9a:c5:b9:f6:22:57:32:7b:37:69:d4:ef:3e:9e:d5:9f:d3: 6c:5a:79:a0:11:20:d5:05:36:f0:c6:de:fa:60:1f:e5:57:e4: 0d:cb:45:4d:a6:73:56:7f:7d:19:59:aa:3f:69:f8:51:eb:2e: 86:5a:cf:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw QUUxRDAwNDcwHhcNMjUwNTEwMjMzNTM0WhcNMjUwNTE3MjMzNTM0WjAYMRYwFAYD VQQDEw02ODFmZTJjNi1hODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FISrvSXjA2DNmv+hQSrh2Jj/elAKpRo9FEL+GQSCIGdOnJpu3StTuIk6oIJ xX4a6r6RBOhcwI8vFoHbaC27yIfjVrqsupmQJCpfV1hDJMFbbCVFAVeVhq8eJBi+ 3V4Z3xvBDdbGczOMJLr1gZA3vcFNlEMQ9n7zFkLvdRK0P2XFmyeEJslGCfA7wq8n adxiasrsOpDau69Yo8YDx0ojaRHiViUYfmPHKDIvfuMgyG3XhrUpU8/iDmtHjQ5a MZWZj4WE9GZk1YjOdqpzjcWPA1rVbAC46wFK0ysRqOPNdNsjML/mj0iodjRUHvyw GChUH0H8dAuujsYFsnQQbwmfhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcOjFfr STsfpU/rvx04VIzm0qnmMB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3 OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjMt6XjsT2dYwcwcRuC5wUB0GIjmtZPNTFKJUKmxI+llDL1IPtfRud +Mq4N6YmibWqsFYWs7gbBt0Rp65Jjc9vLv9VQC8rXEOmnQSFv67K33cDiN7pmR3K dQNwuMUPxM5748HV/5XEL71qUgEXLmWcoHZUa3GY3/XuQzZKEdTopHbTHsQjbN/S Dm8JQiiU3hoBxtjvIToSUSQOxy8qC++OKLdbXiCfee3CJ1WisVfFv2cwMszduR4a b/BvSr3SifEN7RSiRXTnmsW59iJXMns3adTvPp7Vn9NsWnmgESDVBTbwxt76YB/l V+QNy0VNpnNWf30ZWao/afhR6y6GWs92 -----END CERTIFICATE-----Generated at Mon May 12 13:31:54 2025 by rpki-client